Riskcovery

CVE-2026-43390

nstree: tighten permission checks for listing

State
Published
Severity
Not scored
Published
May 8, 2026
Updated
May 11, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nstree: tighten permission checks for listing

Even privileged services should not necessarily be able to see other privileged service's namespaces so they can't leak information to each other. Use may_see_all_namespaces() helper that centralizes this policy until the nstree adapts.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 76b6f5dfb3fda76fce1f9990d6fa58adc711122b to before 0abd81645fc95ec6a9d4e4813000f22c5efc0ff4Affected
  • 76b6f5dfb3fda76fce1f9990d6fa58adc711122b to before 8d76afe84fa2babf604b3c173730d4d2b067e361Affected
LinuxLinux
  • 6.19Affected
  • before 6.19Not affected
  • 6.19.9 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.